Lucene search
+L

216 matches found

Positive Technologies
Positive Technologies
added 2019/09/26 12:0 a.m.16 views

PT-2019-4349 · Linux +2 · Linux +2

Name of the Vulnerable Software and Affected Versions: Linux versions prior to 5.3.4 Description: A local attacker can exploit a reference count usage error in the fib6 rule suppress function in the fib6 suppression feature of the net/ipv6/fib6 rules.c file, when handling the FIB LOOKUP NOREF fla...

10CVSS6.3AI score0.07619EPSS
SaveExploits1References53
Prion
Prion
added 2018/03/28 10:29 p.m.24 views

Race condition

A vulnerability in the Forwarding Information Base FIB code of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, network attacker to cause a denial of service DoS condition. The vulnerability is due to a limitation in the way the FIB is internally representing recursive...

7.1CVSS5.4AI score0.01015EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2018/03/28 10:0 p.m.122 views

CVE-2018-0189

CVE-2018-0189 describes a DoS vulnerability in Cisco IOS and IOS XE FIB code. The issue arises from how the Forwarding Information Base represents recursive routes; an unauthenticated, network attacker can inject a specific recursive pattern to cause a device to reload, leading to DoS. Affected p...

7.1CVSS5.4AI score0.01015EPSS
SaveExploits0References2Affected Software1
Cisco
Cisco
added 2018/03/28 4:0 p.m.75 views

Cisco IOS and IOS XE Software Forwarding Information Base Denial of Service Vulnerability

A vulnerability in the Forwarding Information Base FIB code of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, network attacker to cause a denial of service DoS condition. The vulnerability is due to a limitation in the way the FIB is internally representing recursive...

6.8CVSS3.2AI score0.01015EPSS
SaveExploits0References1
Prion
Prion
added 2018/02/08 7:29 a.m.20 views

Race condition

A vulnerability in the forwarding information base FIB code of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause inconsistency between the routing information base RIB and the FIB, resulting in a denial of service DoS condition. The vulnerability is due to incorrect...

5CVSS8.3AI score0.02297EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2018/02/08 7:29 a.m.22 views

CVE-2018-0132

A vulnerability in the forwarding information base FIB code of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause inconsistency between the routing information base RIB and the FIB, resulting in a denial of service DoS condition. The vulnerability is due to incorrect...

8.6CVSS8.5AI score0.02297EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2018/02/08 7:0 a.m.13 views

CVE-2018-0132

A vulnerability in the forwarding information base FIB code of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause inconsistency between the routing information base RIB and the FIB, resulting in a denial of service DoS condition. The vulnerability is due to incorrect...

7.2AI score0.02297EPSS
SaveExploits0References3
Kitploit
Kitploit
added 2017/10/09 9:18 p.m.15 views

NIELD v0.6.1 - Network Interface Events Logging Daemon

NIELD Network Interface Events Logging Daemon is a tool to receive notifications from kernel through netlink socket, and generate logs related to interfaces, neighbor cache ARP,NDP, IP address IPv4,IPv6, routing, FIB rules, traffic control. Download $ git clone https://github.com/t2mune/nield.git...

7.3AI score
SaveExploits0References1
OSV
OSV
added 2017/08/24 10:29 p.m.6 views

UBUNTU-CVE-2017-13686

net/ipv4/route.c in the Linux kernel 4.13-rc1 through 4.13-rc6 is too late to check for a NULL fi field when RTMFFIBMATCH is set, which allows local users to cause a denial of service NULL pointer dereference or possibly have unspecified other impact via crafted system calls. NOTE: this does not...

7.8CVSS7.1AI score0.00359EPSS
SaveExploits0References3
OSV
OSV
added 2017/08/24 10:29 p.m.7 views

CVE-2017-13686

net/ipv4/route.c in the Linux kernel 4.13-rc1 through 4.13-rc6 is too late to check for a NULL fi field when RTMFFIBMATCH is set, which allows local users to cause a denial of service NULL pointer dereference or possibly have unspecified other impact via crafted system calls. NOTE: this does not...

7.8CVSS5.8AI score0.00359EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2017/03/21 9:6 a.m.8 views

kernel: scsi: aacraid: double fetch in ioctl_send_fib()

A race condition flaw was found in the ioctlsendfib function in the Linux kernel's aacraid implementation. A local attacker could use this flaw to cause a denial of service out-of-bounds access or system crash by changing a certain size value...

5.1CVSS6.6AI score0.00339EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2016/11/03 8:8 a.m.7 views

kernel: scsi: aacraid: double fetch in ioctl_send_fib()

A race condition flaw was found in the ioctlsendfib function in the Linux kernel's aacraid implementation. A local attacker could use this flaw to cause a denial of service out-of-bounds access or system crash by changing a certain size value...

5.1CVSS6.6AI score0.00339EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2016/11/03 8:6 a.m.19 views

kernel: scsi: aacraid: double fetch in ioctl_send_fib()

A race condition flaw was found in the ioctlsendfib function in the Linux kernel's aacraid implementation. A local attacker could use this flaw to cause a denial of service out-of-bounds access or system crash by changing a certain size value...

5.1CVSS6.6AI score0.00339EPSS
SaveExploits0References4
OSV
OSV
added 2016/09/04 12:0 a.m.40 views

DSA-3659-1 linux - security update

Bulletin has no description...

5.8CVSS7AI score0.15073EPSS
SaveExploits8
OpenVAS
OpenVAS
added 2015/10/08 12:0 a.m.61 views

Oracle: Security Advisory (ELSA-2007-0347)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.4AI score0.05035EPSS
SaveExploits17References2
Kitploit
Kitploit
added 2014/03/12 8:53 p.m.17 views

[Nield v0.5.0] Network Interface Events Logging Daemon

nieldNetwork Interface Events Logging Daemon is a tool that receives notifications from the kernel through the netlink socket, and generates logs related to interfaces, neighbor cache ARP,NDP, IP address IPv4,IPv6, routing, FIB rules, traffic control.It can be configured using command-line option...

7.3AI score
SaveExploits0
OSV
OSV
added 2013/12/09 12:0 a.m.16 views

UBUNTU-CVE-2013-6431

The fib6add function in net/ipv6/ip6fib.c in the Linux kernel before 3.11.5 does not properly implement error-code encoding, which allows local users to cause a denial of service NULL pointer dereference and system crash by leveraging the CAPNETADMIN capability for an IPv6 SIOCADDRT ioctl call...

4.7CVSS6.7AI score0.00435EPSS
SaveExploits1References7
NVD
NVD
added 2009/11/11 7:30 p.m.34 views

CVE-2009-3135

Stack-based buffer overflow in Microsoft Office Word 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, Open XML File Format Converter for Mac, Office Word Viewer 2003 SP3, and Office Word Viewer allow remote attackers to execute arbitrary code via a Word document with a malformed File...

9.3CVSS7.9AI score0.35792EPSS
SaveExploits1References9
CVE
CVE
added 2009/11/11 7:0 p.m.98 views

CVE-2009-3135

Microsoft Word Remote Code Execution (CVE-2009-3135) affects Word 2002 SP3, Word 2003 SP3, Word 2004/2008 for Mac, Open XML File Format Converter for Mac, Word Viewer 2003 SP3, and Word Viewer. The vulnerability is a stack-based buffer overflow in Word’s File Information Block (FIB) parsing, whic...

9.3CVSS7.8AI score0.35792EPSS
SaveExploits1References9Affected Software4
seebug.org
seebug.org
added 2009/11/11 12:0 a.m.62 views

Microsoft Word记录解析栈溢出漏洞(MS09-068)

BUGTRAQ ID: 36950 CVE ID: CVE-2009-3135 Word是微软Office套件中的文件处理工具。 Word处理包含有畸形文件信息块(FIB)结构的特制Word文件的方式中存在栈溢出。成功利用此漏洞的攻击者可以完全控制受影响的系统,攻击者可随后安装程序;查看、更改或删除数据;或者创建拥有完全用户权限的新帐户。那些帐户被配置为拥有较少系统用户权限的用户比具有管理用户权限的用户受到的影响要小。 Microsoft Office 2008 for Mac Microsoft Office 2004 for Mac Microsoft Word Viewer 200...

9.3CVSS6.8AI score0.35792EPSS
SaveExploits1
Rows per page
Query Builder